fix(secret): exclude upper case before secret for `alibaba-access-key…

…-id` (#5618)
aquasecurity · Nov 22, 2023 · b1dc60b · b1dc60b
1 parent 65351d4
commit b1dc60b
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/pkg/fanal/secret/builtin-rules.go b/pkg/fanal/secret/builtin-rules.go
@@ -279,7 +279,7 @@ var builtinRules = []Rule{
 		Category:        CategoryAlibaba,
 		Title:           "Alibaba AccessKey ID",
 		Severity:        "HIGH",
-		Regex:           MustCompile(`([^0-9a-z]|^)(?P<secret>(LTAI)(?i)[a-z0-9]{20})([^0-9a-z]|$)`),
+		Regex:           MustCompile(`([^0-9A-Za-z]|^)(?P<secret>(LTAI)(?i)[a-z0-9]{20})([^0-9A-Za-z]|$)`),
 		SecretGroupName: "secret",
 		Keywords:        []string{"LTAI"},
 	},

diff --git a/pkg/fanal/secret/testdata/alibaba-access-key-id.txt b/pkg/fanal/secret/testdata/alibaba-access-key-id.txt
@@ -1,3 +1,6 @@
 key : LTAI1234567890ABCDEFG123asd
 key = LTAI1234567890ABCDEFG123,
-asdLTAI1234567890ABCDEFG123
+asdLTAI1234567890ABCDEFG123
+asDLTAI1234567890ABCDEFG123
+as1LTAI1234567890ABCDEFG123
+key : LTAI1234567890ABCDEFG123Asd